chore: add some missing domains to csp

Swaylend · Nov 27, 2024 · 4e5be1e · 4e5be1e
1 parent 3e6c692
commit 4e5be1e
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/apps/frontend/next.config.js b/apps/frontend/next.config.js
@@ -12,8 +12,10 @@ const CONNECT_DOMAINS = [
   'https://mainnet.fuel.network',
   // Outside domains
   'https://api.web3modal.org',
-  'https://api.bako.global',
   'wss://relay.walletconnect.com',
+  'https://verify.walletconnect.com/',
+  'https://api.bako.global',
+  'wss://api.bako.global',
   // PostHog
   'https://eu.i.posthog.com',
   // Sentio
@@ -31,7 +33,7 @@ const CSP_HEADER = `
     script-src 'self' 'unsafe-eval' 'unsafe-inline' https://vercel.live https://static.swaylend.com https://testnet-swaylend.b-cdn.net;
     style-src 'self' 'unsafe-inline' https://static.swaylend.com https://testnet-swaylend.b-cdn.net https://fonts.googleapis.com;
     img-src 'self' blob: data: https://static.swaylend.com https://testnet-swaylend.b-cdn.net;
-    font-src 'self' https://fonts.googleapis.com https://static.swaylend.com https://testnet-swaylend.b-cdn.net;
+    font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://static.swaylend.com https://testnet-swaylend.b-cdn.net;
     object-src 'none';
     base-uri 'self';
     form-action 'self';